CVE-2026-72558

Publication date 29 September 2026

Last updated 30 September 2026


Ubuntu priority

Cvss 3 Severity Score

8.8 · High

Score breakdown

Description

(An SQL injection vulnerability in CiviCRM through 6.18.alpha1 allows a ...)

Status

Package Ubuntu Release Status
civicrm 26.04 LTS resolute Not in release
24.04 LTS noble Not in release
22.04 LTS jammy
Needs evaluation
20.04 LTS focal
Needs evaluation
18.04 LTS bionic
Needs evaluation
16.04 LTS xenial
Needs evaluation

Severity score breakdown

CVSS version: CVSS v3.0

Base score 8.8 · High

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H


Access our resources on patching vulnerabilities